Below are some common questions about the Apple Device Enrollment Program and Apple School Manager. If you can’t find your answer here, contact us using the Get Help page.

Certified Desktop and Apple Automated Device Enrollment (ADE)

What is the Apple Automated Device Enrollment Program?

The Automated Device Enrollment (ADE) Program allows IT administrators to manage the setup of new iOS, tvOS, and macOS devices more efficiently. At Cornell, this setup enrolls new macOS devices in Certified Desktop. Only devices purchased directly through The Cornell Store with a departmental KFS account can become part of this program. This ensures that only those devices belonging to Cornell University are affected by the ADE management settings. Apple’s Automated Device Enrollment page contains detailed information for IT administrators.

What is Certified Desktop?

Certified Desktop is a package of security tools intended to promote the adoption of effective data security measures and policies on campus. This service for faculty and staff consists of a suite of state-of-the-art security tools.

Certified Desktop complies fully with Cornell information privacy policies and is intended only for data security and protection. No personal information is ever collected about browsing history, filenames, or the content of personal files (such as documents, photos, music, or email).

Which Apple devices are eligible for the program?

Any university-owned devices that were purchased from The Cornell Store. Devices purchased with a P-card, at non-Cornell retail store, or with a personal credit card are not eligible for ADE.

When is an Apple device marked as eligible for ADE?

At the time of order fulfillment if the device is purchased with a Cornell KFS Departmental account number from The Cornell Store.

What happens to my device when it is marked as eligible for ADE?

When a device is marked as ADE eligible, this device will appear in Cornell's Apple School Manager (ASM). Apple associates Cornell University as the owner of this device.

What data does ADE collect?

Initially, ADE collects the date of purchase, serial number, and hardware model information (for example, “2022 13’ MacBook Pro”) of the device.

Can my device be released from ADE after it is enrolled?

Yes. Users can request a device be released from ADE (and Certified Desktop) using this form.

Does ADE enrollment result in installation of all Certified Desktop components, or just Jamf?

No. ADE enrollment does not install Certified Desktop components itself. The IT Service Group that supports the device controls the installation of Certified Desktop components using the Mac endpoint management utility, Jamf.

I have more questions, how do I contact someone?

You can contact us regarding the Apple Device Enrollment at the Get Support page.

Apple School Manager (ASM)

What is Apple School Manager (ASM)?

Apple School Manager is a simple, web-based portal that helps IT administrators deploy iOS, tvOS, and macOS in education. You can easily provide students and staff with access to Apple services, set up devices, get apps and books, and enable faculty with tools to create engaging learning experiences — all from one place.

Cornell University currently uses Apple School Manager to enroll devices into our Mobile Device Manager (MDM) JAMF Pro.

Cornell University also uses Apple School Manager to purchase mobile device applications for iOS through the Apple Volume Purchase Program (VPP).

The only device management function that can be accomplished with ASM is the enrollment into a mobile device management (MDM) tool.

What data does Apple School Manager (ASM) collect?

ASM collects the date of purchase, serial number, and hardware model information (ie. 2022 13’ MacBook Pro) of the device.

ASM collects application purchase information through the Apple Volume Purchase Program (VPP).

Can my device be released from ASM after it is enrolled?

Devices can be released from ASM after they are enrolled. 

A released device means that the next time the device connects to the Internet, it will no longer be subject to any kind of automatic MDM enrollment that is setup. It also means Apple no longer associates the device with Cornell, so if any kind of contact with Apple is required about the device, proof of purchase may be required.

Is there any cost to use this service?

No. Departments are responsible for their own devices and VPP purchases.

I have more questions, how do I contact someone?

You can contact us regarding the Apple School Manager at the Get Support page.

What about the Mobile Device Management Tool?

For more information see Cornell's use of JAMF Pro as a Mobile Device Management Tool.

Credits

This article was adapted from the University of Minnesota's article on Apple Deployment Programs and Apple's K-12 Education page.